Caerphilly
Managed IT support and cyber security for Caerphilly businesses of 5 to 60 people. Standalone companies and UK sites inside international groups, offices and warehouse floors, held to the same standard either way. On site support is included rather than charged by the visit.
Internationala UK site inside a global business
5 to 60people is the size we work best with
On site includedunlimited, not charged by the visit
Start here
Caerphilly has a lot of sites that are one part of something larger, whether that is a UK arm of a group abroad or a warehouse attached to an office. That changes what support has to fit around.
Three levels, per user per month.
Published in full on the pricing page, which is useful when a spend has to be justified to a head office that will ask what the alternative costs and wants a number rather than a range.
Four of us, and you will know all four.
For a site that sits inside a larger group, that tends to matter more than the size of the provider. The useful one is the provider who knows your building, not the one who knows your group standard. Who we are.
Who we look after here
Two we can describe, and they have nothing whatever in common. The UK distribution operation of a global tyre business, and a family and private client law firm. Nobody is named on this site until they have read what it says and agreed to it.
It is a tyre distributor. The group is international and headquartered overseas, and the main distribution operation runs from Caerphilly. We manage a lot of the technology at this end.
Which means decisions get made somewhere else and the site here still has to work on Monday morning.
A UK operation inside a larger group has a particular problem. Head office may standardise on something, or change a system, or have a view about security that arrived as a policy rather than a conversation. Meanwhile there is a warehouse here that has to keep shipping, and the people on the ground need somebody who will answer the phone in their timezone and speak plainly about what is actually possible.
That is a good fit for a four person company and a bad one for a large provider, because it needs somebody who knows the site rather than somebody working from a ticket queue and a group standard.
The further away a decision gets made, the more the site here needs somebody who understands both ends of it.
Their case management system lived on a server in a cupboard, backed up to a USB drive that nobody had checked in a long time. Every client matter the firm held sat on one box and one stick.
It moved to a hosted platform with multi factor authentication in front of it and immutable backups behind it, which means a backup that ransomware cannot reach in to encrypt. Both servers were retired. What the SRA expects of a firm is a separate conversation and one we have often.
If this is you
Four things that come up every time, and none of them is really a technical problem.
Worth establishing early rather than during an incident. If your Microsoft 365 tenant is managed by the group, there are things you cannot change locally and things nobody has told you that you can. Knowing which is which is the first job.
A standard written for a much larger operation can be wrong for a distribution site with a warehouse floor and a handful of office users. Somebody has to translate rather than just comply, and that conversation goes better with evidence than with opinions.
Where there is internal or group IT already, we can run the security layer alongside them rather than instead of them. Nobody’s job is under threat and the alerts get read around the clock.
Obvious and still the thing people mention most. When the warehouse has a problem at eight in the morning, the useful provider is the one twenty minutes away who already knows the site, not the one several hours behind.
What we do
Two things most people come to us for, and a handful of others clients ask us to take on once they would rather ring one number than four.
Support that answers first time
The day to day. A helpdesk that a named person answers, machines monitored and patched, starters and leavers handled, and backup of your Microsoft 365 email and files. Fixed monthly fee per user, no hourly billing.
Security that someone is actually watching
Managed detection and response with a security operations centre reading the alerts around the clock, email security inside Microsoft 365, DNS and browser protection, vulnerability management, and email authentication so nobody can send invoices as you.
Certification that wins the tender
We hold Cyber Essentials ourselves and we take clients through it to both levels, Cyber Essentials and Cyber Essentials Plus. The full cost is laid out at the start, including what the certifying body charges.
AI your staff can use without leaking the business
People are already pasting company information into AI tools, whether it is sanctioned or not. We put something in place that they can use safely, with the controls and the visibility that the free tools do not give you. We start by auditing what those tools would currently be able to reach inside your business, which is almost always more than anyone expects.
Talk to us
How many people you have, what you are running, and whether decisions get made here or somewhere else. You will get a straight answer on whether we can help and what it would cost per month.
Questions
At minimum: endpoint protection with people watching the alerts around the clock, email security, DNS and browser protection, email authentication with SPF, DKIM and DMARC, vulnerability scanning, a password manager, and multi factor authentication on every account. With us all of that is in the Secure level at £55 per user per month plus VAT, rather than a separate contract. Security awareness training is included on Secure+, and Cyber Essentials is priced on top when a client or a contract asks for it. If a provider’s security offer is antivirus and a firewall, ask who reads the alerts at 2am. What the security layer covers.
£42 per user per month plus VAT for IT support on our Essential level, £55 on Secure, which adds the full security layer, and £72 on Secure+. That is per person, so per employee it is £42 to £72 a month depending on the level, and a 10 person office on Secure is £550 a month. No hourly billing and no call out charges, and visits to Caerphilly are included. Everything is on the pricing page, including what sits outside the monthly fee.
You may not, for day to day support. Where it usually earns its place is security: one person or a small team cannot watch alerts around the clock, and attacks do not keep office hours. Co-managed security means we run the security stack and the 24/7 monitoring while your own people, or your group IT, keep the helpdesk and the projects. It is quoted rather than published, because it depends on what your team already covers. If you’re weighing up hiring your own IT person instead, here are the numbers.
With us, every level includes unlimited remote and on site support, the helpdesk, monitoring of laptops, PCs, servers and network kit, updates and patching, backup of Microsoft 365 email and files, hardware support, and starters and leavers. The helpdesk runs 9am to 5pm, Monday to Friday. Secure adds the security layer on top. When you compare packages, check whether on site visits are included or billed, and ask what sits outside the monthly fee. What is covered day to day.
We are based in Cardiff, a short run from Caerphilly, and already look after businesses there, including the UK distribution operation of an international tyre group. Unlimited on site support is included from Essential upwards, with no call out charge. We have 20+ Google reviews at 5.0, and you can read them before you ring.
Start with the things that cost nothing. Turn on multi factor authentication for every account, starting with anyone who has admin rights. Install outstanding updates on every machine, the router and the firewall included. Change any default passwords on network kit, put visitors on a separate guest wifi, and remove accounts belonging to people who have left. Those five close most of the doors attackers actually use. After that, managed endpoint protection with somebody watching the alerts is the biggest single step, and it is in our Secure level.
Yes. The helpdesk runs 9am to 5pm, Monday to Friday. Ring or email it and one of the four people who do the work picks it up. Most problems are fixed remotely, and when it needs somebody on site in Caerphilly, the visit is included rather than billed. 24/7 out of hours support is available as an add-on.
We can. It starts with a survey rather than a shopping list, because adding kit to a design that was never right is how offices end up with patchy wifi. A warehouse floor is part of the same job: coverage to the far corner, handheld scanners and label printers included. Broadband and connectivity sit alongside it on the same invoice.
Five things. A per user price in writing, with what sits outside it. Who actually answers when you ring, and whether it is the same people each time. What security is included, and who reads the alerts at night. Whether on site visits are included or billed. And whether you own your Microsoft 365 tenant and your domain, so you could leave if you needed to. How to check who owns your tenant.
Yes, and your staff should barely notice. We audit what is there before we change anything, so nothing gets switched off until we know what depends on it. The part that makes a switch painful is admin access only the old provider holds, which is why the first job is making sure the tenant and the domain are in your name. How we take over.
Ring 029 2168 0968. It rings Tom first, then Mark, and a person answers. The helpdesk runs 9am to 5pm, Monday to Friday, and whoever picks up is one of the four people who do the work, so there is no first line to get past. Caerphilly clients get the same four names every time.
With what you have now: how many people need a line, which numbers you want to keep, and what you pay today. From there it is usually a cloud phone system from £10.50 per user per month plus VAT, with a basic desk phone included free, and your existing numbers ported across. Business phone systems.
Yes, and we already do exactly that. The practical questions are who owns the Microsoft 365 tenant, what the group standardises on, and what the site is free to decide locally. Establish that at the start rather than during an incident and most of the friction disappears.
Next step
Tell us how many people are on site, what the group has standardised on, and what you are actually free to decide here. That conversation is usually shorter than people expect.
Based in Cardiff, working across Wales and the West.
